Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access ControCheck if you run itEPSS 0.46%Nov 6, 2025
- High7.3containerd is an open-source container runtime.Check if you run itEPSS 0.17%Nov 6, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureRank surerank.This issue affects SureRank: from n/a throuCheck if you run itEPSS 0.24%Nov 6, 2025
- High7.5Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded SensiCheck if you run itEPSS 1.33%Nov 6, 2025
- Medium6.5Missing Authorization vulnerability in ganddser Jock On Air Now (JOAN) joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air NCheck if you run itEPSS 0.27%Nov 6, 2025
- Medium5.3Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects imEvent: from n/a through <= 3.4.0Check if you run itEPSS 0.27%Nov 6, 2025
- High8.2Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control SecuCheck if you run itEPSS 0.35%Nov 6, 2025
- High7.1Missing Authorization vulnerability in bPlugins Info Cards info-cards allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Info Cards: from n/a througCheck if you run itEPSS 0.29%Nov 6, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jhainey Milevis Dropify wc-dropi-integration allows Reflected XSS.This issue aCheck if you run itEPSS 0.24%Nov 6, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bnovotny User Registration Aide user-registration-aide allows Reflected XSS.ThCheck if you run itEPSS 0.24%Nov 6, 2025
- High7.1Missing Authorization vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album.Check if you run itEPSS 0.29%Nov 6, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL InjectioCheck if you run itEPSS 0.36%Nov 6, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bingu replyMail replymail allows Stored XSS.This issue affects replyMail: fromCheck if you run itEPSS 0.24%Nov 6, 2025
- High8.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd.Check if you run itEPSS 0.27%Nov 6, 2025
- Medium6.1IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional wCheck if you run itEPSS 0.21%Nov 6, 2025
- Medium4.3The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to a missing capability check on the rtafar_ajax() function inCheck if you run itEPSS 0.23%Nov 6, 2025
- Medium4.8Cross-site scripting vulnerability exists in GROWI prior to v7.2.10.Check if you run itEPSS 0.18%Nov 6, 2025
- Medium4.3The Easy Email Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.13%Nov 6, 2025
- Medium4.9The Easy Email Subscription plugin for WordPress is vulnerable to SQL Injection via the 'uid' parameter in all versions up to, and including, 1.3 due to insufficient escaping on thCheck if you run itEPSS 0.30%Nov 6, 2025
- High7.5A Server-Side Request Forgery (SSRF) vulnerability, achievable through an XML External Entity (XXE) injection, exists in MetInfo Content Management System (CMS) thru 8.1.Check if you run itEPSS 0.51%Nov 6, 2025
- High8.1alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.40%Nov 6, 2025
- Medium6.8On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Admin password by inserting a USB drive (containing a publicly documented reset strCheck if you run itEPSS 0.22%Nov 6, 2025
- High7.5An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android bCheck if you run itEPSS 0.51%Nov 6, 2025
- Medium6.5ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.42%Nov 5, 2025
- High7.3Youki is a container runtime written in Rust.Check if you run itEPSS 0.27%Nov 5, 2025
Sort